Tutorials

APNIC Internet Resource Management

This training introduces, highlights, and explains the key essentials of Internet resource management. It focuses on understanding the structures, processes, procedures, and policies involved in requesting, allocating, and managing Internet addresses (IPv4 and IPv6) and Autonomous System (AS) numbers.
The course also includes aspects of the APNIC Whois Database, Reverse DNS delegations, and MyAPNIC address management tool.

APNIC DNSSec

The Domain Name System (DNS) is a critical part of Internet infrastructure and the largest distributed Internet directory service. DNS translates names to IP addresses, which is required for web navigation, email delivery, and other Internet functions. To guarantee the availability of Internet services, it is important for networking professionals to understand DNS concepts, configurations, operations, and security aspects.
This tutorial will discuss the concept of DNS and security mechanisms, such as TSIG and DNSSEC. The deployment of DNSSEC will be discussed in detail with demonstrations.

HTTP Botnet in Action

HTTP controlled botnets are currently one of the most common method of managing botnets. This tutorial looks at the structure, operation, functionality and control of HTTP botnet.
Using a network of virtual images, participants will create and control botnets and examine how these are used to target internet users. We will look at their behavior and look at how these botnets can be identified in a network.

Data Visualization

The Internet is a big place made up of big numbers. Analyzing data can be a challenge and, therefore, portraying data as a visualization can be helpful in understanding the issue at hand. In this tutorial we’ll go beyond static pictures and take a fresh approach in visualizing data sets. We will examine various tools and techniques, look at ways to parse data in the right format and do some programming to create a visualization. Understanding basic programming is useful but you certainly do not have to be a Perl or C++ guru.

Understanding and using netflow and nfsen as a forensic tool

This tutorial provides a basic introduction to the Netflow protocol and its application as a forensic tool. The structure and generation of netflowdata will be discussed and its use for both monitoring networks and analyzing network traffic and behavior will be examined. In particular, the use of Nfsen as a security tool will be considered and exercised with participants using an example of a flow dataset to examine and analyze flow traffic and work through a number of incident scenarios.

Overview of LISP: A new Routing Architecture

Today's Internet routing and addressing system is facing serious scaling challenges with ever-increasing user population, end-site multi-homing, traffic engineering, and policy routing. The Default Free Zone (DFZ) ofthe inernet routing table is growing at a potentially alarming rate
[RFC 4984]. The problem is getting worse by IPv4 address space depletion leading to a finer breakup of IPv4 addresses with less aggregation potential.

LISP (Locator/ID Separation Protocol

LISP is a promising new routing architecture (submitted as an RFC draft and rapidly moving towards standardization), takes a new look at semantics of existing addressing schemes intending to solve routing scalability issues. LISP also brings additional benefits in terms of simplified and cost-effective multi-homing, ingress traffic engineering, IP address (host) mobility, IPv6 transition simplification, and simplified, highly- scalable network virtualization.
This tutorial provides a basic understanding of LISP protocol, its control and data plane operations, some sample configurations using one of the vendor’s routers, and deployment use cases.

Quicklinks

Accommodation for NZNOG12